Threats tagged 'ghsa-9754-6rhw-gj3h'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.4	CVE-2026-6658jupyter/nbconvert allows Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports Medium5.42026-06-26GCVE DatabaseCVE-2026-6658 A Cross-site Scripting (XSS) vulnerability exists in jupyter/nbconvert versions up to 7.17.0. The vulnerability arises because the `text/vnd.mermaid` output is rendered directly into HTML exports without proper escaping, allowing injection of arbitrary HTML or JavaScript. This affects any server using nbconvert to convert notebooks to HTML, potentially enabling attackers to execute scripts in the context of users viewing the exported HTML. Report on CVE-2026-6658 Vulnerability CWE-79 #ghsa-9754-6rhw-gj3h #pypi	GCVE Database	2026-06-26

Page 1 of 1